Vrew Privacy Policy

VoyagerX Inc.(the “Company”, “we”, “us”), while providing the Vrew service (the “Service”), takes protection of personal information of users seriously. In order to comply with relevant laws such as the Act on Promotion of Information and Communications Network Utilization and Information Protection, etc., and the Personal Information Protection Act, the Company has established and complies with the Privacy Policy (this "Policy").

The Company's Privacy Policy may be revised due to changes in relevant laws and guidelines or changes in the Company's internal operation policy. If we change this Policy, the change will be posted on the homepage. If you have any questions about this Policy, you may provide your opinion through the customer inquiry channel on the Service homepage and the Company website.

1. Items of personal data collected and purposes of use

1. The Company collects only the following minimum personal information in order to provide Services.
2. The Company collects and processes names, e-mails, and passwords at the time of membership registration for the purpose of confirming the user's intention to join membership, verifying identity, personal identification, limiting the number of subscriptions, confirming the consent of the legal representative when collecting personal information of children under the age of 14, verifying the identity of the legal representative in the future, and confirming the intention to withdraw from membership.
3. The Company collects the name and email address of the legal representative in the process of obtaining the consent of the legal representative when signing up for membership for a user under the age of 14.
4. The Company collects client IDs and use record of user for the purpose of user analysis and service improvement. The client ID is used to identify the programs that are installed on each computer and new client ID is assigned at the time of installation when a user uses the service without membership subscription. Client ID is an anonymous ID by which a particular individual cannot be identified and cannot be used for identifying a person.
5. In the process of receiving user inquiries for the purpose of service consultation to provide better services, the Company collects personal information such as name, e-mail addresses or phone numbers, or details of consultation to identify and reply to customer. In addition, the customer may transmit error data that occurs in the use of the Service to the Company in order to obtain a more accurate error diagnosis. This is not mandatory, and the Company does not use the personal information for any purpose other than as stated below.
6. The Company collects voice information files only for those who wish to use the Service to provide speech analysis services. In this case, the voice information file may contain unstructured personal information that can identify a specific individual. The Company processes the information only for the purpose of speech analysis and subtitle file creation requested by the user, and deletes it within 24 hours after the completion of speech analysis and subtitle file creation.
7. The Company collects payment information (credit card information, personally identifiable information) only for those who wish to pay in order to provide paid The collection and processing of payment information is carried out by payment processors, and the Company does not keep specific information about the user's payment method.
8. The Company offers customized cloud service enabling process of works in a multiple number of devices. Information such as user’s project file, size of the project file, upload time of the file, etc. is saved while using the service, and atypical personal information may be collected if such information is contained in the foregoing files. User has a right to upload, revise, download or delete project files on/from the cloud, and the Company shall not read, revise or delete the file uploaded by the user. If the data saved under the subscription exceeds the permitted capacity due to refund/unsubscription, the data will be retained up to 120 days and the data exceeding the capacity will be deleted immediately thereafter.
9. In order to offer “AI My Voice” learned by using the user’s voice, the Company collects the audio data, voice and name from the user who desires to use the service. The Company processes such information for leaning “AI My Voice” as requested by the user and for no other purpose. The Company retains the collected data for no longer than 7 days from the date of collection, and delete immediately thereafter.
10. In addition, during the user's use of the service or business processing, the company can collect automatically generated information such as use of service records, OS types and versions, connection logs, advertisement identification information, and terminal information, also, the company can use this formation for user analysis and service improvement purposes.

2. How We Collect Personal Information

The Company collects the personal information specified in Article 1 of this Policy in the following ways to provide smooth services:

• When signing up through the membership registration page in the mobile application and desktop program, the member enters directly
• Collection in the process of installing and using the service, collected and generated information through collection tools (including cookies)
• Collection through voluntary provision by members during use, etc.

3. Period of Retention and Use of Personal Information

1. In principle, the Company destroys the user's personal information without delay when the purpose of collecting and using personal information is However, in accordance with the Company's internal policy, if the member withdraws or the Company terminates the use agreement with the member, the Company retains personal information for one year from the date of termination of the use agreement in order to prevent abuse of rights, prevent abuse, and prepare for various disputes and requests for investigation cooperation.
2. Notwithstanding Paragraph 1, if it is necessary to preserve it in accordance with relevant laws such as the Protection of Communications Secrets Act, it shall be preserved for that period. In this case, the Company will use the information it keeps only for the purpose for which it is
3. The history of personal data processed to comply with other obligations stipulated by law may be retained for a period to demonstrate that

4. Consignment of Processing of Personal Information and Overseas Transfer

In order to improve services, the Company obtains the consent of the user in accordance with the relevant laws and regulations, or discloses or notifies the relevant matters, and entrusts the personal information of the member to the outside for processing. The Company concludes a consignment contract with a document containing the contents of Article 26 (1) of the Personal Information Protection Act and supervises whether the trustee safely processes personal information. Currently, the consignee of the processing of users' personal information and their tasks are as follows:

Vrew does not provide personal information to other operators outside of the country. However, for the fulfillment of contracts regarding the provision of information and communication services and the convenience of users, the processing of personal information is consigned overseas as follows:

1. Statistical information, non-personally identifiable information, generated installation information and personal information collected with the user's consent pursuant to the use of the Services are transmitted, processed and stored in the programs such as Firebase and Google Cloud Platform by Google LLC and Amazon Web Services (AWS) offered by Amazon Web Services,
2. Personal information collected with the user's consent, generated installation information, non-personally identifiable information, and statistical information are analyzed by Google Analytics (GA) and Amplitude.
3. The user's contact information (name, e-mail address or phone number) is explicitly collected and stored so that the user can be notified quickly when the operator responds through the channel corporation used to respond to user inquiries.
4. We use the STT API provided by Google LLC, Amazon Web Services, to provide voice analysis function.
5. We use the translation API provided by Google LLC and XL8 to provide subtitle translation function.
6. We use the payment system provided by Korea PortOne Co., Ltd., NHN KCP, Paymentwall and PayPal to provide payment settlement functions for paid services.
7. We use the API provided by Google LLC, Amazon Web Services (AWS), NAVER Corp. and KT to provide speech synthesis function.
8. We use the Chatgpt API provided by OpenAI to provide phrase generation function.
9. We use Stable Diffusion API provided by Stability AI to provide image generation function.

5. Provision of personal data to a third party

1. The company uses the user's personal data within the scope as notified by Article 1 and does not use it beyond that scope or provide to other companies or organizations. However, exceptions are made in the following cases.
   1. In case the investigation agencies request the provision of personal data according to the procedure and method prescribed by the relevant law for investigation purposes
   2. In case it is provided to advertisers, business partners or research groups, in a form that an individual cannot be identified, for statistical purposes, academic research or market research
   3. In case there is a request in accordance with the provisions of other relevant laws
2. Besides, in the event that personal data is required to be provided to a third party, it can be provided to the third party with the user's consent by notifying the purpose of collection and use, collected items, and retention period.

6. Process and method of destruction of personal data

The company basically destroys the information immediately after the purpose of collecting and using personal data is achieved. Specific destruction procedures and methods are as follows.

1. Procedure of destruction

   Personal data collected by the company shall be preserved for the period specified in this Agreement and other related laws and destroyed after the purpose of the collection has been achieved. Such personal data will not be used for purposes other than the agreed retention purpose unless it is provided by law.

2. Methods of destruction

   1. personal data printed on paper is shredded with a shredder or destroyed through incineration.
   2. personal data stored in electronic file format is deleted by a technical method that does not allow reproduction of the same.

7. Rights and obligations of the user

1. A user (if younger than 14 years of then his or her legal representative) shall have the right to access or request a modification of his/her registered personal data at any time and may withdraw consent to the use of his/her personal data notifying to the company. However, the email address of the member entered at the time of registration cannot be modified.
2. The user has a duty to protect the user's personal data and not to infringe that of others. Please be careful not to leak personal data, such as e-mail address, and not to infringe others personal data.
3. The user shall always keep his/her personal data up to date and is also responsible for any problems caused by entering any incorrect information.

8. Protection of personal data for overseas users

The company's service is provided and operated in accordance with the Korean statutes and this personal data processing policy is based on the personal data processing policy written in Korean which is the original copy. This policy may be translated into English and Japanese, and if there is any contradiction between the translated version and the Korean version, the Korean version will take precedence. The company complies with the personal data protection regulations applicable to the user's jurisdiction and the laws of each country.

9. Operation of automatic collecting device for personal data and Rights of option

1. The company operates cookies on the service website. Cookies identify your browser and are used to provide useful and convenient services, such as usage patterns analysis, to the user.
2. The user has the right of option regarding the installation and use cookies. Through options settings in the web browser, the user can permit saving all cookies, each time verifies whether cookies are saved, or refuse the storage of all cookies. Refusal to the storage of cookies may restrict the use of some services.
3. Google Analytics
   1. The Company aims to provide better service to its customers. Google, Inc. Improve and personalize services and products by analyzing and evaluating how customers use the company's services and understanding customer needs using Google Analytics (hereinafter referred to as "GA"), a web analytics service provided by (Google). To provide efficient services.
   2. GA analyzes the user's service usage method using'cookies', which are text files stored on mobile or desktop devices. The use of GA can be denied through the setting of the web browser or program.
   3. In order to analyze cookie information, Google transmits 'cookie' information without personal identification possibility to Google servers in the United States. For more information about Google's processing of information, please visit www.google/com/analytics/learn/privacy.html.

10. Technical/Administrative protection measures for personal data

The company has prepared the following technical/Administrative measures to ensure that personal data is not lost, stolen, leaked, tampered with or damaged while processing it.

1. Technical protection
   1. To prevent leakage or damage to the users' personal data by hacking or computer viruses, the company enables secure transmission of personal data on the network through encrypted communication.
   2. The firewall prevents unauthorized access from outside and all possible technical devices are installed to ensure systematic security.
   3. The company double stores the information of the members collected at the time of signing up in the database of AWS and Firebase.
2. Administrative protection
   1. The company designates management of personal data only to those in charge, and through frequent education, the company always emphasizes compliance with the personal data protection policy.
   2. To immediately solve any problems detected, implementation of the policy and compliance of the person in charge is checked through the company’s personal data protection organization.
   3. The company will not take responsibility for problems related to personal data caused by any mistakes of an individual or third parties without reasons attributable to the company.

3. Chief Privacy Officer

   The company does its best to provide the best service by using personal data safely. However, the company is not liable for damage to information due to unexpected accidents caused by hacking or other basic risks in networking, despite the company has taken technical complementary measures, and does not take responsibilities for disputes caused by users and third-party postings.

   Information about the Chief Privacy Officer is as follows. We are rapidly and fully responding to inquiries regarding personal data.

   Item	Contents
   Name	Sedong Nam
   Company / Position	VoyagerX inc. / CEO
   E-mail	vrew-feedback@voyagerx.com
   Tel.	+82 (02) 2161-5189

If you need to report or consult for infringement of personal data, please contact the following organizations.

• KISA (privacy.kisa.or.kr / without area code 118)
• Internet Crime Investigation Center in the Supreme Prosecutors' Office (www.spo.go.kr / without area code 1301)
• Korean National Police Agency Cyber Bureau (cyberbureau.police.go.kr / without area code 182)

Additional clause

• Version No. of Privacy policy: 1.0
• Enforcement date of Privacy policy: 10th day of July, 2019
  
  
• Version No. of Privacy policy: 2.0

• Enforcement date of Privacy policy: 15th day of September, 2020

  Updates to Vrew Privacy Policy (1)
  
  

• Version No. of Privacy policy: 3.0

• Enforcement date of Privacy policy: 27th day of April, 2021

  Updates to Vrew Privacy Policy (2)
  
  

• Version No. of Privacy policy: 4.0

• Enforcement date of Privacy policy: 1st day of September, 2021

  Updates to Vrew Privacy Policy (3)
  
  

• Version No. of Privacy policy: 5.0

• Enforcement date of Privacy policy: 10th day of November, 2022

  Updates to Vrew Privacy Policy (4)
  
  

• Version No. of Privacy policy: 6.0

• Enforcement date of Privacy policy: 24th day of April, 2023

  Updates to Vrew Privacy Policy (5)
  
  

• Version No. of Privacy policy: 7.0

• Enforcement date of Privacy policy: 7th day of May, 2024

  Updates to Vrew Privacy Policy (6)